2006-08-10,07:59:49
System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)
Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能
以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
启动项目
注册表
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [Microsoft Corporation]
<PHIME2002ASync><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation]
<PHIME2002A><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [Microsoft Corporation]
<LegendRemDriver><C:\Program Files\LEGEND\联想遥控器驱动\Remdrv.exe> []
<lxdevclient><C:\Program Files\Common Files\DeviceManager\lxdevclient.exe> []
<Agent><; C:\Program Files\CyberLink\PowerVCRII\Agent.exe> [CyberLink]
<Remote_Agent><; C:\Program Files\CyberLink\PowerVCRII\RemoteAgent.exe> [Cyberlink Corp.]
<SysExplr><C:\HEROSOFT\Hero3000\SYSEXPLR.EXE> []
<kpcdst><; C:\Program Files\Kingsoft\kingplayer2003\cdsprite.exe> [金山软件股份有限公司]
<Symantec NetDriver Monitor><C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer> [Symantec Corporation]
<IMSCMig><C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload> [Microsoft Corporation]
<RavTask><"D:\Program Files\Rising\Rav1\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.]
<!ewido><"F:\ewido anti-spyware 4.0\ewido.exe" /minimized> []
<KernelFaultCheck><%systemroot%\system32\dumprep 0 -k> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
<SoundMix><rundll32.exe C:\WINDOWS\system32\soundmix.dll,Load> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [Microsoft Corporation]
<Userinit><userinit.exe,> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll> [Beijing Rising Technology Co., Ltd.]
<{28A0345C-9549-452C-AAE7-11D7C7329154}><> []
<{C019D24C-0C8B-4633-A1C4-9611480593C4}><> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\skwinlogon]
<WinlogonNotify: skwinlogon><dll.dll> []
==================================
启动文件夹
[联想键盘驱动程序]
<C:\Documents and Settings\All Users.WINDOWS\「开始」菜单\程序\启动\联想键盘驱动程序.lnk><N>
[InterVideo WinCinema Manager]
<C:\Documents and Settings\All Users.WINDOWS\「开始」菜单\程序\启动\InterVideo WinCinema Manager.lnk><N>
[Adobe Gamma Loader]
<C:\Documents and Settings\All Users.WINDOWS\「开始」菜单\程序\启动\Adobe Gamma Loader.lnk><N>
==================================
服务
[C-DillaCdaC11BA / C-DillaCdaC11BA]
<C:\WINDOWS\system32\drivers\CDAC11BA.EXE><Macrovision>
[C-DillaSrv / C-DillaSrv]
<C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE><C-Dilla Ltd>
[LexBce Server / LexBceS]
<C:\WINDOWS\system32\LEXBCES.EXE><Lexmark International, Inc.>
[LEGEND DeviceManager Service / lxdmg]
<C:\Program Files\Common Files\DeviceManager\DeviceManager.exe><>
[lxswitch / lxswitch]
<C:\happyhome\幸福飞梭\lxswitch.exe><>
[Norton AntiVirus Auto Protect Service / navapsvc]
<"C:\Program Files\Norton AntiVirus\navapsvc.exe"><Symantec Corporation>
[Rising Proxy Service / RfwProxySrv]
<d:\program files\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.>
[Rising Personal Firewall Service / RfwService]
<d:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.>
[Rising Process Communication Center / RsCCenter]
<"D:\Program Files\Rising\Rav1\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[RsRavMon Service / RsRavMon]
<"D:\Program Files\Rising\Rav1\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[SAVScan / SAVScan]
<"C:\Program Files\Norton AntiVirus\SAVScan.exe"><Symantec Corporation>
[ScriptBlocking Service / SBService]
<><N/A>
[Srchpmd2a-h / Srchpmd2a-h]
<><N/A>
==================================
浏览器加载项
[Yahoo 1G电邮]
{507F9113-CD77-4866-BA92-0E86DA3D0B97} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail, N/A>
[信息检索(&R)]
{92780B25-18CC-41C8-B9BE-3C9C571A8263} <D:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL, Microsoft Corporation>
[东方卫士]
{A26ABCF0-1C8F-46e7-A67C-0489DC21B9CE} <C:\WINDOWS\system32\dfvs\dfvsol\DFVSIEBR.dll, >
[在线杀毒]
{A26ABCF0-1C8F-46e7-A67C-0489DC21B9EE} <http://www.i110.com/dfvsonline/, N/A>
[QQ]
{c95fe080-8f5d-11d2-a20b-00aa003c157b} <c:\documents and settings\user_common\my documents\qq\qq.exe, N/A>
[QQIEFloatBarCfgCmd Class]
{DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <C:\Documents and Settings\user_common\My Documents\qq\QQIEHelper.dll, N/A>
[情景聊天]
{E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} <http://cn.rd.yahoo.com/home/messenger/bjk/clientbtn/?http://cn.messenger.yahoo.com/, N/A>
[东方卫士]
{A6790AA5-C6C7-4BCF-A46D-0FDAC4EA90EF} <C:\WINDOWS\system32\dfvs\dfvsol\DFVSIEBR.dll, >
[SnagIt]
{8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} <C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll, TechSmith Corporation>
[CEditCtrl
Object]
{488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\WINDOWS\system32\aliedit\AliEdit.dll, www.alipay.com>
[MUWebControl Class]
{6E32070A-766D-4EE6-879C-DC1FA91D2FC3} <C:\WINDOWS\system32\muweb.dll, Microsoft Corporation>
[DFVSScanFile Control]
{9BBD100C-E820-4930-9937-E8F3AA40E584} <C:\WINDOWS\system32\dfvs\dfvsol\DFVSSFOL.ocx, >
[Shockwave Flash
Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[Rising Web Scan
Object]
{E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <C:\WINDOWS\Downloaded Program Files\OL2005.dll, Beijing Rising Technology Co., Ltd.>
[ThunderIEHelper Class]
{0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\system32\xunleibho_v5.dll, N/A>
[]
{044AC430-E755-409A-8464-684113EFA672} <C:\WINDOWS\system32\Dbkap.dll, N/A>
[]
{0DE6B205-EDC2-4588-AB0A-616968DA8E6C} <C:\WINDOWS\system32\Wgagk.dll, N/A>
[]
{10100A90-7646-427A-8599-992A393E4084} <C:\WINDOWS\system32\Uowdqv.dll, N/A>
[]
{10E68CB2-C129-40A1-882F-D46A8E462BA6} <C:\WINDOWS\system32\Yper.dll, N/A>
[Windows Genuine Advantage Validation Tool]
{17492023-C23A-453E-A040-C7C580BBF700} <C:\WINDOWS\system32\legitcheckcontrol.dll, Microsoft Corporation>
[FltSetUp Class]
{1D49D58D-5C84-4B50-8359-D9809BEB2B32} <C:\Program Files\Internet Explorer\Connection Wizard\icwuti1.dll, N/A>
[]
{53707962-6F74-2D53-2644-206D7942484F} <D:\PROGRA~1\SPYBOT~1\SDHelper.dll, N/A>
[]
{69844A4C-4FBA-4BB4-9CB0-BD7B66A6B306} <C:\WINDOWS\system32\Rxvre.dll, N/A>
[]
{6C45DA6A-5441-4D66-BE5C-272E0425B195} <C:\WINDOWS\system32\Zksjov.dll, N/A>
[MUWebControl Class]
{6E32070A-766D-4EE6-879C-DC1FA91D2FC3} <C:\WINDOWS\system32\muweb.dll, Microsoft Corporation>
[]
{76A02F97-E874-4474-838E-70B8AA816E8B} <C:\WINDOWS\system32\Odhbal.dll, N/A>
[]
{83B13ED4-CB49-49A1-BCA2-2D922BC1B93D} <C:\WINDOWS\system32\Vbhg.dll, N/A>
[Thunder Browser Helper]
{889D2FEB-5411-4565-8998-1DD2C5261283} <d:\Program Files\Thunder\ComDlls\XunLeiBHO_002.dll, N/A>
[SnagIt]
{8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} <C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll, TechSmith Corporation>
[IEHlprObj Class]
{999ADFA2-8AD1-47FF-97FC-69FB847458F4} <C:\Progra~1\NetMeeting\nmview.dll, N/A>
[WinSC Class]
{9ACEEE31-1440-471B-AA46-72B061FE7D61} <C:\WINDOWS\system32\WinSC64.dll, N/A>
[东方卫士]
{A6790AA5-C6C7-4BCF-A46D-0FDAC4EA90EF} <C:\WINDOWS\system32\dfvs\dfvsol\DFVSIEBR.dll, >
[]
{A9930D97-9CF0-42A0-A10D-4F28836579D5} <D:\PROGRA~1\KuGoo3\KUGOO3~1.OCX, N/A>
[SearchAssistantOC]
{B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\System32\shdocvw.dll, N/A>
[]
{C90218CC-2D17-426D-A7DA-7CEF4A596D7F} <C:\WINDOWS\system32\Vjpos.dll, N/A>
[Adobe Acrobat Control for ActiveX]
{CA8A9780-280D-11CF-A24D-444553540000} <D:\应用软件\ADOBER~1.0